Oroinc Platform
4 CVEs affecting Oroinc Platform. Latest disclosed: 2024-03-25. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43852 | High | 8.8 | 2022-01-04 | OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into exist… |
CVE-2022-41951 | High | 8.5 | 2023-11-27 | OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is poss… |
CVE-2021-41236 | Medium | 6.9 | 2022-01-04 | OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template conten… |
CVE-2023-45824 | Medium | 4.3 | 2024-03-25 | OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vuln… |